Later archive addition

Do (Not) Follow the White Rabbit: Challenging the Myth of Harmless Open Redirection

Soheil Khodayari, Kai Glauber and Giancarlo Pellegrino · NDSS Symposium

Re-assessment of open redirects, focused on client-side JavaScript redirections. A static and dynamic pipeline mined 184 vulnerability indicators and found 20,800 open redirects across 623 of the top 10,000 sites plus 326 more, and shows over 11.5 percent can be escalated to XSS, CSRF or information leakage.

Record

Researcher

Soheil Khodayari, Kai Glauber and Giancarlo Pellegrino

Published by

NDSS Symposium

In the archive

• Added to the 2025 archive after the original list was published

Related sources

• Talk recording
• Talk recording

Tags

• open-redirect
• xss
• csrf
• info-leak
• javascript
• static-analysis
• dynamic-analysis
• large-scale-scan
• measurement-study
• tooling
• owasp-a01-2021
• owasp-a03-2021
• owasp-a04-2021

This page is the archive's own catalogue record. The research is the work of Soheil Khodayari, Kai Glauber and Giancarlo Pellegrino, first published at the original source. Preserved copies are kept so the citation survives its host.